CVE-2017-9170

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the ReadImage function in input-bmp.c:370:25...

CVE-2017-9171

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-bmp.c:492:24...

CVE-2017-9166

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the GETCOLOR function in color.c:18:11...

CVE-2017-9196

libautotrace.a in AutoTrace 0.31.1 has a "negative-size-param" issue in the ReadImage function in input-tga.c:528:7...

CVE-2017-9193

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:538:33...

CVE-2017-9199

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:192:19...

CVE-2017-9181

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid write and SEGV, related to the ReadImage function in input-bmp.c...

CVE-2017-9177

libautotrace.a in AutoTrace 0.31.1 allows remote attackers to cause a denial of service invalid read and SEGV, related to the ReadImage function in input-bmp.c:390:12...

CVE-2017-9194

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer over-read in the ReadImage function in input-tga.c:559:29...

CVE-2017-9200

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in input-tga.c:528:63...

CVE-2017-9161

libautotrace.a in AutoTrace 0.31.1 has a "cannot be represented in type int" issue in autotrace.c:188:23...

CVE-2017-9153

libautotrace.a in AutoTrace 0.31.1 has a heap-based buffer overflow in the pnmloadrawpbm function in input-pnm.c:391:13...

CVE-2017-9188

CVE-2017-9188 affects AutoTrace 0.31.1 (libautotrace.a). The vulnerability is a left-shift/biWidth-related integer overflow in input-bmp.c:516:63 that can trigger out-of-bounds behavior in a BMP handling path; CVSS reports high to critical impact (network, no authentication, high impact to confid...

CVE-2017-9171

CVE-2017-9171 describes a heap-based buffer over-read in libautotrace.a (AutoTrace 0.31.1) within ReadImage in input-bmp.c at line 492:24. The vulnerability affects AutoTrace’s libautotrace.a and is confirmed by multiple sources (e.g., NVD entry and national/international advisories). The CVSS me...

PT-2017-18739 · Autotrace Team +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to the pnm load ascii function in input-pnm.c, which can cause a denial of service due to an invalid write and SEGV. This is a result of a problem in the libautotrace.a library...

PT-2017-18765 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a "cannot be represented in type int" problem in the input-bmp.c file at line 309:7 of the libautotrace.a library in AutoTrace. Recommendations: For AutoTrace version 0.31.1, at th...

PT-2017-18743 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue in AutoTrace is related to a "cannot be represented in type int" problem. This problem is located in the autotrace.c file at line 188, column 23. Recommendations: For AutoTrace version 0.31.1, a...

PT-2017-18764 · Autotrace +2 · Autotrace +2

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue allows remote attackers to cause a denial of service, which is related to a use-after-free and an invalid heap read in the GET COLOR function in color.c. Recommendations: For AutoTrace version...

PT-2017-18776 · None +2 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 ALT Linux affected versions not specified Description: The issue is related to a heap-based buffer over-read in the ReadImage function. This function is located in the input-tga.c file. The estimated number of...

PT-2017-18749 · Autotrace +1 · Autotrace +1

Name of the Vulnerable Software and Affected Versions: AutoTrace version 0.31.1 Description: The issue is related to a heap-based buffer overflow in the ReadImage function, located in the input-bmp.c file. This function is susceptible to overflow, potentially leading to exploitation...